VULNERABILITY INTELLIGENCE
CVE-2012-3009
CVSS score8.5 HIGH
EPSS probability2.15%
CISA KEVNot currently listed
Published2012-08-16
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:S/C:C/I:C/A:C
Description
Siemens COMOS before 9.1 Patch 413, 9.2 before Update 03 Patch 023, and 10.0 before Patch 005 allows remote authenticated users to obtain database administrative access via unspecified method calls.
Primary references
- ics-cert@hq.dhs.gov — Vendor Advisory
- ics-cert@hq.dhs.gov — US Government Resource
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — US Government Resource